The panel's Users tab lets you grant dozens of individual permissions. Think in terms of what could go wrong:
Dangerous permissions
- Settings → Reinstall: re-runs the install script (files stay, but a wrong version can break plugins).
- Startup: can change versions and start file.
- Files → Delete: can delete the world.
- Backups → Delete/Restore: can delete backups or overwrite the server with an old state.
- Users: can add more users.
- Allocations, Databases: rarely needed.
Templates
| Role | Give |
|---|---|
| Moderator | Control: console, start, restart, stop |
| Builder | Moderator + Files: read, read-content, create, update (no delete) |
| Developer | Builder + Files: delete, archive; Startup: read; Backups: read, create, download |
| Co-owner | everything except Users and Settings: reinstall |
Review the list every few months. Remove people who left.
Two accounts, one server
A subuser logs in with their own e-mail and password. They never see yours. If you shared your password with someone in the past, change it now (Account settings) and give them a subuser instead.